Moving the enterprise to Kubernetes
summary
Hafslund Nett migrates hundreds of services for 720,000 customers onto a cloud managed Kubernetes platform, using AKS with RBAC and Azure AD to grant namespace-based access, moving to separate clusters per environment to isolate workloads, and enforcing resource requests/limits, pod security policies and admission controllers (Gatekeeper/OPA) to stop noisy neighbors. Authentication for customer apps uses OpenID Connect for B2C, CI/CD and observability rely on centralized logs feeding Prometheus / Log Analytics and Terraform-managed infra.
AI-written summary · about
chapters (30)
- 0:00Introduction
- 4:14Who are you
- 4:50Two customers
- 5:34Offnet
- 8:23Distributed Platform
- 8:58Should you move
- 9:43Alternatives to Kubernetes
- 10:27Learning curve
- 12:15Backstory
- 13:01What could go wrong
- 13:39Serviceoriented architecture
- 17:43Rolebased access control
- 20:10The communities
- 21:03Encapsulation
- 23:13Framework
- 26:20AD Groups
- 27:37Constraints
- 28:18Terraform
- 28:52English Controller
- 34:53Identity Server
- 36:45Core Team
- 37:13QA
- 37:27Security
- 38:31Kubernetes vendors
- 39:01Trusting images
- 43:51Pod security policy
- 45:34Networking policy
- 46:37Service Mesh
- 47:55Service Mesh Interface
- 50:04Q A
related talks
45mLeverage AKS for your enterprise platform: H&M’s journey
01h 02mLearnings from the Enterprise-level Kubernetes transformation at Elkjøp Nordic
35mKubernetes journey
33mNavigating the Seas of Transformation: Migrating from EC2 to Kubernetes
39mLessons Learned Migrating an Existing Product to a Multi Tenant Cloud Native Environment
29mFrom EC2 to Kubernetes Takeaways from a Brownfield Migration
46mAdvanced Kubernetes: Lesson Learned From Building..
24mMigration of NCSOFT Game Servers to Kubernetes